Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: nscGYsRik3Ulqzd1u0ct7U3uzLj5TZcdhQNq/LlZB9Q=
Subject key identifier: 0D:23:9D:71:A2:AD:9F:D7:E6:8B:E4:B5:14:B5:F4:89:7B:43:8B:73
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019E1EA356D22F924DDCF9D69E1D702C0E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1798
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:21 +0000
Manifest next update: Thu 14 May 2026 00:01:21 +0000
Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=)
5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: BeqVoI8muqLXpOgq9lebqb3I3Qq5+fzNkTIzerN/Ru0=)
8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:56:d2:2f:92:4d:dc:f9:d6:9e:1d:70:2c:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: May 13 00:01:21 2026 GMT
Not After : May 14 00:01:21 2026 GMT
Subject: CN=0d239d71a2ad9fd7e68be4b514b5f4897b438b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:0d:54:63:5a:8c:4e:8c:21:72:60:ca:83:
65:de:75:14:d3:ef:bb:31:14:fa:2a:dd:75:4b:a7:
84:95:bd:bb:d8:94:b9:26:dd:d8:07:47:dc:25:e2:
22:cd:b6:2d:ff:97:77:25:3c:70:07:85:d2:6e:b8:
36:c0:f1:7e:b9:82:ed:8a:6e:b7:35:f0:2a:ee:ee:
ab:21:bf:52:83:b2:43:f8:93:a8:72:a2:ef:5e:53:
63:1c:58:08:0f:44:20:8e:de:d8:5a:a8:ea:8f:4b:
f8:60:45:fb:c2:d1:d2:01:1c:32:44:0d:a9:7a:3a:
ca:b1:9f:e7:05:07:99:a4:31:5f:ca:31:e6:76:09:
b9:7e:6b:59:b5:05:03:53:e3:dd:6a:19:6e:94:58:
12:e4:91:6d:07:14:83:63:4f:65:44:c4:4f:78:1f:
b3:75:b7:5c:0c:85:32:75:b4:21:c2:82:01:2c:47:
9d:b8:dd:92:dc:03:1d:32:6c:f4:f1:af:e3:dc:dd:
00:cb:c6:ec:8d:4c:62:be:9c:56:b5:70:cf:58:81:
b0:fa:01:dd:4a:96:b6:84:92:9a:4b:06:7b:70:53:
34:d2:7b:9b:97:af:7f:01:20:6e:6f:54:01:55:bc:
78:d3:5a:ab:4f:5e:bc:e8:83:a5:c1:68:54:99:ee:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:9D:71:A2:AD:9F:D7:E6:8B:E4:B5:14:B5:F4:89:7B:43:8B:73
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d9:c4:9e:ff:5a:fd:a7:b3:eb:97:6c:67:e8:7b:67:a3:1f:
0c:a2:fc:cb:51:dc:54:29:01:ba:63:24:47:5f:37:67:5f:94:
05:7f:a6:50:cf:52:a1:77:ee:be:a2:83:7a:02:14:c0:93:be:
02:47:41:78:db:d9:95:fc:10:a4:5b:2a:e7:4d:3d:2d:98:f4:
ad:be:e6:aa:a5:62:f1:56:1d:32:d3:a9:b8:ca:65:eb:77:71:
72:41:a1:80:7e:e1:d3:9a:5b:1e:42:c2:a3:5d:cb:18:56:3d:
18:ee:ee:10:26:b2:62:04:be:10:db:fd:26:88:5d:6e:79:b9:
89:4c:06:05:36:13:1c:d9:86:f4:33:45:5e:92:04:a1:11:e9:
6f:99:97:19:94:2f:ff:b9:2f:f4:d7:62:9c:42:bb:14:a5:43:
3f:27:ec:94:e0:ac:de:59:70:2c:62:7f:4e:cc:e0:23:85:71:
4f:40:97:36:e6:81:ee:8c:2a:14:3e:18:bf:4a:ed:6f:2e:36:
79:5a:62:38:e1:47:be:ca:7a:c3:94:3d:e0:ca:fc:3c:d6:ca:
c2:0a:92:9c:10:35:0b:26:8a:72:e2:f5:4d:3a:01:90:ca:fb:
3a:a3:15:85:84:33:9f:a6:35:ef:59:c9:37:3f:ea:be:46:ff:
d5:fa:74:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo1bSL5JN3PnWnh1wLA6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjYwNTEzMDAwMTIxWhcNMjYwNTE0MDAwMTIxWjAzMTEwLwYDVQQD
EygwZDIzOWQ3MWEyYWQ5ZmQ3ZTY4YmU0YjUxNGI1ZjQ4OTdiNDM4YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoacNVGNajE6MIXJgyoNl3nUU0++7
MRT6Kt11S6eElb272JS5Jt3YB0fcJeIizbYt/5d3JTxwB4XSbrg2wPF+uYLtim63
NfAq7u6rIb9Sg7JD+JOocqLvXlNjHFgID0Qgjt7YWqjqj0v4YEX7wtHSARwyRA2p
ejrKsZ/nBQeZpDFfyjHmdgm5fmtZtQUDU+PdahlulFgS5JFtBxSDY09lRMRPeB+z
dbdcDIUydbQhwoIBLEeduN2S3AMdMmz08a/j3N0Ay8bsjUxivpxWtXDPWIGw+gHd
Spa2hJKaSwZ7cFM00nubl69/ASBub1QBVbx401qrT1686IOlwWhUme5/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0jnXGirZ/X5ovktRS19Il7Q4tzMB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdnEnv9a
/aez65dsZ+h7Z6MfDKL8y1HcVCkBumMkR183Z1+UBX+mUM9SoXfuvqKDegIUwJO+
AkdBeNvZlfwQpFsq5009LZj0rb7mqqVi8VYdMtOpuMpl63dxckGhgH7h05pbHkLC
o13LGFY9GO7uECayYgS+ENv9Johdbnm5iUwGBTYTHNmG9DNFXpIEoRHpb5mXGZQv
/7kv9NdinEK7FKVDPyfslOCs3llwLGJ/TszgI4VxT0CXNuaB7owqFD4Yv0rtby42
eVpiOOFHvsp6w5Q94Mr8PNbKwgqSnBA1CyaKcuL1TToBkMr7OqMVhYQzn6Y171nJ
Nz/qvkb/1fp0tw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:20 2026 by rpki-client